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Educational Research and the Confidentiality of Data 

R. F. Boruch 

American Council on Education 

The ma 1 p te nanc e of the confidentiality of student information has 
recently been a major concern among educational researchers and admini- 
strators. In this paper, the privacy issue is examined with respect to 
the information system which comprises the basis for the ACE Higher Educa- 
tion Data Bank. The system's functions are the acquisition of biographi- 
cal and other data on approximately 300,000 college freshmen annually 
ynH cont inuing longitudinal research based on subsamples of these students. 

A brief overview of the relevant literature is provided. Broad dif- 
ferences and similarities of the ACE Data Bank and other environments are 
examined. Particular attention is devoted to evaluating devices for main- 
tenance of confidentiality at each level of the information system: data 

collection, transmission, and analysis dissemination. The administrative 
and ethical regulations now in operation, and the computer devices appro- 
priate for preserving respondents' privacy are evaluated at each level of 
the system. Protection for the respondent and the researcher are discus- 
sed briefly in the context of extralegal harassment and liabilities. Recom- 
mendations and a partial statistical resolution to the "potential intelli- 
gence system" are offered. 



^Partial support for this research was provided by NIMH Grant NM17084- 
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Educational Research and the Confidentiality of Data^ 

R. F. Boruch 

American Council on Education 

The maintenance of confidentiality in research on student populations 
has recently been a major concern among educational researchers. Profes- 
sional organizations of psychologists, sociologists, statisticians and 
administrators have devoted increasing attention to the issues and have 
provided useful general commentary on the privacy question in research. 

In this paper, more specific aspects of the privacy issue are examined 
with respect to the information system comprising the basis for the ACE 
Data Bank. The function of the system is annual acquisition and mainte- 
nance of biographical and other data on a large representative sample of 
college freshmen. Research derived from such data is helpful in assess- 
ment of college impact on students (and vice versa) and examination of 
factors important in attrition rates, achievement and development of students. 

A brief overview of relevant literature is provided for those who are 
unfamiliar with the general topic. The description includes enumeration 
of professional organization interests in the privacy issue. Major dif- 
ferences and similarities of the ACE Data Bank to other data bank systems 
are also examined. A major emphasis is placed on evaluating devices which 
enhance maintenance of confidentiality at each level of the information 
system: data collection, transmission, and analysis dissemination. The 

1 

Partial support for this research was provided by NIMH Grant NM17084- 
01. The writer is indebted to Dr. A. V. As tin and Dr. John Caffrey for 
their comments and suggestions, and to Laura Kent for her editorial 
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administrative and ethical regulations now in operation, and computer devices 
appropriate for preserving the respondent's privacy are examined. Protection 
for the respondent and researcher are discussed briefly in the context of 
extralegal harassment and liabilities. 

This study was initiated in order to better understand the limitations 
and problems inherent in the kind of research considered here. The solutions 
proposed are not to be interpreted as models, nor should they be considered 
the only alternatives. The examination does furnish a primitive basis for 
strengthening the basic ties between guarantees for individual privacy and 
the acknowledgement of society's need to know itself through social research. 



/ 
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The America n Council on Education: A Brief Description 

The American Council on Education is a nongovernmental council whose 
membership includes nearly 1,500 colleges and universities, national and 
regional education associations, public and private school systems, and 
similar educational and professional organizations. The Council's purpose 
is to facilitate cooperation and coordination among these members in the 
interests of improving the educational processes, particularly in higher 
education. Separate commissions of the Council deal with relations between 
the Federal government and educational institutions, academic affairs, acade- 
mic administration, and international education; among their primary objec- 
tives are the acquisition, interpretation, and dissemination of information 

relevant to the educational enterprise. 

The Council's sources of finance are dues from institutional members 
and grants from private foundations, government agencies, and learned and 
professional societies. Office of Research activities are supported pri- 
marily through such dues, and secondarily by grants for specific studies 
from the National Institute of Mental Health and the National Science 
Foundation. 

Within the Council, the Office of Research carries a major responsi- 
bility for conducting research on the higher education process. Insofar 
as the research programs frequently require that students be identified, 
the Office of Research is deeply concerned with maintaining the confidenti- 
ality of data. The necessity for identification becomes apparent when one 
is aware of the objectives of these programs; therefore, current large-scale 
studies to explore important phenomena in college and university environ- 
ments are described briefly in the following section. 
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Cooperative Institutional Research Program 

The major ongoing project of the Office of Research is the Cooperative 
Institutional Research Program, a long-range longitudinal study of student 
development. Biographical, attitudinal, and environmental attributes, as 
reported by students, are categorized according to sex, type of institution, 
and geographic region. Identifying information is solicited in order to 
permit followup studies designed to assess what impact different institutions 
have on student development. The data are used for constructing normative 
reports, which can be used to make quantitative comparisons among geographic 
regions, different types of institutions, and so forth. The research re- 
ports based on these data have covered such topics as the factors that influ- 
ence college dropout rates, the personal and environmental determinants of 
career choice, and the systematic prediction of manpower supply and demand 
within specific disciplines. 

Black Students in Amer ican Colleges 

This research is directed toward a description of the changing size 
and nature of the black student population in a large representative sample 
of American colleges. Among the specific topics currently being investi- 
gated are the black student's attitudes, aspirations, biographical attri- 
butes, and sources of financial aid, relative to the white student's. 

These comparisons, both within and between types of institutions, can be 
used then as a base for policy decisions. 

Programs for Disadvantaged Students 

This recently initiated study, which draws on current ACE data, is 
a program of evaluative research on aid to disadvantaged college students. 

Aid includes financial support in the form of loans, scholarships, etc., 
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as well as on campus tutorial and counseling services. Its objectives are 
to document aid programs, to evaluate their relative effectiveness, and to 
explore alternative strategies for effective utilization of the resources 
of the college, the students, and the community. The basic data comprises 
student information acquired through the Cooperative Institutional Research 
Program. Followup studies and surveys of students in such programs will 
also be conducted. 

Campus Unrest 

In addition to data from a national sample of 300 institutions in the 
Council's Cooperative Institutional Research Program, this study will be 
based on detailed case-study and interview material from approximately 30 
of the campuses. Among the questions the study seeks to answer are: What 
is the frequency and extent of campus unrest in American higher education? 
What are the current trends, and what do they suggest about the immediate 
future? What accounts for differences among institutions with respect to 
the frequency and severity of the protests that occur? Do administrative 
practices, size, or type of institution play important roles? Are there 
particular administrative arrangements which tend either to provoke protest 
activity or to affect the course of protest once it begins? What impact 
do various types of demonstrations or confrontations have on the college 
environment? 

The Privacy Issue 

Preserving the confidentiality of data has recently been the subject 
of much discussion and not a little controversy; numerous articles, both 
expository and argumentative--i.e. , critical or defensive of current poli- 
cies--have appeared in professional journals and in the popular press. 
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For example. West in's (1967) discussion of a wide variety of situations 
in which the privacy of the individual may be jeopardized represents a 
scholarly treatment of the question. A presidential panel on privacy and 
behavioral research ( Science . 1967) has emphasized the joint responsibi- 
lities of the researcher, his institution, and the agency sponsoring re- 
search in minimizing jeopardy to privacy. Major emphasis is placed on 
understanding methods for protecting individual rights, and the necessity 
for multidisciplinary assessment of problems. More recently, the proposal 
for a National Data Bank (e.g., Dunn, 1967; Sawyer and Schecter, 1968) has 
led legislators, institutional researchers, and professional computer 
scientists to give serious attention to the implications of such a pro- 
ject. Most of these discussions, however, concern data collection instal- 
lations which function not as research bases primarily, but as a source of 
information for evaluation: That is, a person's records can be accessed 

and used to form specific judgments about him. These judgments may involve 
his employment capability, his academic ability as reflected in test scores, 
and other administrative or judicial criteria. If they are to be used on 
a regular administrative basis, the records must be highly reliable and 
must identify the individual. 

In general, longitudinal research in higher education has neither the 
same function nor the same requirement for reliability. Usually, regular 
identification of the individual is unnecessary. Instead, the researcher's 
primary objective in eliciting information is to explore student develop- 
ment. Unambiguous conclusions about this development are possible only if 
the researcher can follow the student's progress by merging records avail- 
able at different points in time. The function of this access to records 
is not evaluative with respect to the single individual. These functional 

ERIC 
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distinctions, though they may seem gratuitous, are of paramount importance 
in defining and dealing with hazards to the privacy of persons who partici- 
pate in this type of research. 

because of the numbers of persons involved and the potential hazards 
that could result from misuse of data, the issue should be of deepest con- 
cern to the educational community. The Carnegie Commission Report (1968) 
suggests that the records of more than 820,000 college students are being 
used for research requiring some identification capability; this estimate 
does not include small and single -instance studies, followup studies cur- 
rently being planned, or longitudinal research on primary and secondary 
school students. 

Major concern about the issue has been given formal expression at a 
number of recent professional conferences. For example, at the 1968 
American Personnel and Guidance Association meetings, a symposium, which 
included representatives of the American Council on Education, the Educa- 
tional Testing Service, the National Opinion Research Center, and the 
National Merit Scholarship Corporation, addressed itself to confidentiality 
of data. Astin (1968) and Nichols (1968) provided a rationale for the 
conduct of longitudinal research in general. Specification of respondent 
rights in tiy > survey environment was examined by Peterson (1968). Bradburn 
(1968) explored the administrative problems inherent in making research 
data available to the community of researchers. The APGA symposium is but 
one example. Other conferences, the proceedings of which have been pub- 
lished, have also manifested concern with the problem. Of particular note 
(though not directly related to survey research) are the discussions of 
the National Council on Measurement in Education (see especially Willingham, 




1967). 
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Cur rent ly, psychological and educational researchers have been giving 

considerable attention to the "ethical lag" (Hoch, 1967) which results In 

part from the rather recent development of the social and legal status of 

the right to privacy of personality. The belated recognition by interested 

professionals and society at large that this right must be balanced against 

the need for information which can enhance the well-being of society has 

prompted more intense examination of the legal and ethical situation. The 

American Educe ional Research Association has formed a standing committee, 

currently directed by Dr. Lyle Schoenfeldt, which will document and evaluate 

2 

alternative approaches to existing problems arising from this issue. The 
American Psychological Association (1969) has initiated revision of its 
current professional code of ethics. Updating the code will be based upon 
surveys of APA membership. This appears to be the only current large-scale 
effort to systematically obtain information relevant to ethical problems. 

Most previous discussions of the topic have confined themselves to 
justifying research and endorsing codes of ethics to meet major problems. 
Moreover, they are usually addressed to the community of respondents and 
to researchers within a specific substantive area, rather than to all. 
Rarely do they specify methods for systematically assessing data collec- 
tion procedures relevant to safeguarding the confidentiality of data; 
what recommendations are offered are frequently gratuitous. Ethical codes 
are embraced, but no procedure for implementing these codes is presented. 

This paper is intended to clarify some of these issues and to pro- 
vide a meaningful approach to solving the problems. Using, in part, a 
systems analytic approach, I have attempted to describe the total infor- 
mation collection and analysis survey scheme that operates in research 




2 This paper is, in part, a result of the writer's membership on 



the committee. 
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programs at the ACE Office of Research. Various environments within the 
scheme, and the communitiea of groups concerned with the issues are con- 
sidered in detail. 

A vigorous examination of this sort is required for two major reasons. 
First, longitudinal research on various groups in the population has become 
an increasingly important part of the total social science effort. Some 
mode of identifying individuals is necessary for the sake of accounting 
alone. Insofar as this presents some hazard to the respondent's privacy, 
it is essential that researchetB give attention to the confidentiality issue. 
Second, much current longitudinal research focuses on social phenomena that 
often involve controversy. Insofar as that controversy results from the 
behavior of the persons under study, their personal privacy may be jeopar- 
dized and the researcher's role may be made increasingly difficult unless 
guidelines with respect to confidentiality are clearly drawn. 

Some Examples of Difficulty 

The ACE Office of Research conducts surveys on the largest single 
sample of college freshmen in the country: Nearly 300,000 students parti- 

cipate annually in its Cooperative Institutional Research Program. For the 
most part, data is collected through survey questionnaires, although very 
occasionally — as in the current campus unrest study- -personal interviews 
are conducted to permit more intensive exploration. Both research tech- 
niques involve the confidentiality issue, but because the survey method 
accounts for a much greater proportion of the total information collected, 
this paper will emphasize the steps taken to ensure confidentiality of the 
data derived from survey questionnaires. It should be borne in mind that 
analogous are frequently used to maintain the confidentiality of 




interview data. 
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Occasionally, students who participate in the research program or 
professional organizations which have some interest in the educational 
enterprise volunteer commentary on the ACE Cooperative Institutional 
Research Program. Such comments, though they vary in appropriateness 
and perceptivenes^ provide insights into what aspects of the confidentiality 
issue are important to different commentators. The following situations 
are fairly typical and should give the reader some feeling for the diffi- 
culties encountered at this level of research operations. 

The first situation involved three students at a small technical col- 
lege who requested that their completed questionnaires be returned. The 
three letters were highly similar, and one is reproduced below: 

I am a freshman presently enrolled at (name of institution). 

On the day I enrolled, a sign guided me... to a large room in the 
Science building. Here we were presented with a very personal 
questionnaire, which we thought was mandatory because we had no 
choice but to take it and fill it out. Ue are all now realizing 
(sic) that the information given out is very personal and probes 
quite deeply into our personal lives. To be very blunt about it, 
the information requested is just a one of your business, and fur- 
thermore, asking for our names, SS numbers, addresses, city, etc., 
makes one wonder just who will get hold of these surveys. In con- 
clusion, I hereby DEMAND that you return my survey immediately to 
me personally at my home address as printed above. Next time, 
give students a choice; I'm sure you will avoid much trouble and 
misunderstand ing . 

Note that the student's major objections derived from his confusion 
over the "voluntariness" of participation, and his misunderstanding of 
the survey function, a misunderstanding which seems attributable to his 
not having been given adequate information at the time he took the survey. 
Since the students' letters were received before the questionnaires had 
been destroyed following data processing, the questionnaires were returned 
as requested. Two were unclaimed and were eventually returned by the 
post office to ACE. In addition, letters explaining more fully the pur- 
poses of the program were sent to each of the three students, 
o 

ERLC 
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A second incident involved some students at a prestigious university 
who initiated a confrontation with college administrators on the issue of 
the freshman questionnaire survey. Their objections to it are reflected 
in the following handout which they circulated among the freshman class. 

YOU ARE FORCED TO TAKE THIS TEST 
MUST YOU TELL THE TRUTH? 

Why are you taking this test? Probably because it's 
required. Test- taking freaks can use it to express them- 
selves, but what legitimate purpose can be served by forcing 
everyone to take the test? 

If you resent the forced administration of this test, 
if you do not care to be arbitrarily defined and classified-- 
if you object for any reason to this test, consider some alter- 
natives: 

1. Do not answer any questions. Sign your name and 
leave the rest blank. 

2. Answer the questions, but lie. 

3. Read and think about the questions, but mark your 
answers according to some irrelevant criterion — 
like the aesthetic charm of an ordered pattern of 
response marks or the mathematical probability that 
20 percent will be correct if all "c's” are marked. 

4. Join us in protest against next year's forced test- 
ing. 

According to additional information provided by the university admini- 
strators, this small group effectively influenced a larger group to destroy 
all the completed questionnaires. Whether or not endorsement of the docu- 
ment destruction was obtained from all of the survey participants is not 
known. The arguments ased by the radical minority were that the American 
Council on Education is a government agency or supported essentially by 
government funds, and that the survey was an evaluative instrument to be 
used for some malevolent, albeit undefined, purpose. Here again, it seems 
likely that procedures used in administering the questionnaire and the on- 
site explanations given to the respondent were inadequate; had they been 
better, the minority which instigated this situation might not have been 




motivated to do so. 
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In yet another instance, a student organization and a national legal 
enterprise group expressed concern over the possibility that university 
administrators would have access to questionnaire data in which individual 
respondents were identified and thus the survey permitted institutional 
invasion of the student's privacy. In consequence, both groups registered 
formal objections to the survey, although neither attempted to assess the 
likelihood of improper disclosure nor did they make any formal objection 
t" the Office of Research's possession of the data. In particular, they 
objected to "certain questions. . .about illegal activity which could result 
in punitive action by the courts, governmental agencies, or respondents' 
administration..." The questions, in fact, referred to whether the respon- 
dent had ever participated in a demonstration, smoked, or drank alcoholic 
beverages. No respondent was asked to specify when, where, or under what 
circumstances he had done so. 

Although we have little systematic data on changes in the nature of 
such objections over time, anecdotal information suggests that recently 
such objections have become more complex and more knowledgeable. The 
volume of correspondence has been small and is typified by the material 
provided. It covers the academic year 1968. These changes have been 
influenced not only by campus unrest, with its consequent confusion and 
mistrust, but also by students' increasing sophistication and their aware- 
ness of the issue of confidentiality. 

In response to some of the situations encountered, the ACE Office of 
Research has taken several approaches to resolving these difficulties. 

First, certain administrative and procedural devices (described later) have 
been adopted. Second, efforts have been made to describe these devices to 
interested persons, including survey respondents. The form of the description 

erJc 
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varies, depending on the objection and on the nature and detail of infor- 
mation required. Personal correspondence is convenient in view of the small 
number of individuals who write objections to the surveys. Detailed infor- 
mation, on stable attributes of the data system, are available in reports 
such as this one and in Bayer, et al . , 1969. Other modes of communication 
are described in following sections of this paper. 

ACE Policy and Procedures 

A number of professional groups, as well as interested individuals, 
have reconmended that ethical policies regarding the maintenance of data 
confidentiality be developed and stated explicitly. Such guidelines give 
to the interested participant or observer an unambiguous acknowledgement 
of the researcher* s concern with safeguarding individual privacy. Moreover, 
the delineation of ethics serves as a useful reference system within which 
a policy may be implemented administratively. Insofar as such guidelines 
also include information about the function of the organization or the 
research function of the data, public misconceptions can be minimized. 

Policy Statements and Advisory Committees 
In view of these considerations, the American Council on Education 
has formally encouraged the members of its research staff to support, and 
to behave in accordance with, the code of ethics adopted by their respec- 
tive professional organizations. The Council endorses adherence to the 
codes of ethics of, for example, the American Psychological Association 
(1967) and the National Education Association (1968), and the codes cur- 
rently proposed by the American Sociological Association. 

The relevance of current ethical codes to the confidentiality issue 
and to the educational researcher is exemplified by several provisions in the 
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In fulfilling his obligation to the student, the educator: 

Shall conduct professional business in such a way that 
he does not expose the student to unnecessary embarrassment 
or disparagement. 

Shall not use professional relationships with students for 
private advantage. 

Shall keep in confidence information that has been obtained 
in the course of professional service. 

Shall permit no commercial exploitation of his professional 
position. 

An explicit statement of policy relevant to administrative records 
and based on the codes of ethics was adopted by the American Council on 
Education in 1968. This policy was formally recommended for considera- 
tion to the colleges and universities which are ACE members and to other 
interested institutions. It provides a general rationale for developing 
further policy and discusses relevant aspects of informed consent, the 
fundamental principle of confidentiality, and the nature of student data 
which should not be recorded for administrative purposes. The recommenda 

tions can be summarized as follows: 

a. The organization should institute and firmly implement clear 

policies to protect the confidential contents of student 
records . 

b. When requests are made for information about the students’ 
beliefs or behavior, and these requests seem contradictory 
to the fundamental principle of privacy of records, no 
response should be given other than affirmation of the 
principle, without consultation with an attorney. 

c. When there is any doubt about whether it is possible to safe- 
guard confidentiality of a student's records, the respondent's 

ERIC 
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consent to Its us© should b© formally sought and the data should 
not be used unless that consent is obtained. 

d. College and university policy should properly include considera- 
tion of the interests of research and scholarship to insure that 
freedom of inquiry for the scientific enterprise is not abridged. 

e. Colleges and universities should discontinue the maintenance of 
membership lists of student organizations, especially those in- 
volving political belief or action (American Council on Education, 
1968) . 

These recommendations, and the ethical code on which they were based, 
were, in general, favorably received by academic administrators, and a New 
York Times editorial (July 25, 1967) acknowledged the usefulness of their 
substantive information. The recommendations overlap partly with a recent 
joint statement made by the American Association of University Professors, 
by the National Student Association, and other such organizations (AAUP 
Bulletin . Summer 1968). 

To summarize, the American Council on Education assumes the responsi- 
bility for maintaining the confidentiality of all data obtained under its 
auspices, and this responsibility extends to records in which institutions 
are identifiable as well as to information about specific respondents. Data 
usage is strictly confined to statistical assessment in the context of 
research. The procedures that are currently being used preclude, or minimize, 
either accidental or deliberate use of the data for any function in which 
individuals or institutions must be identified. The nature of potential 
hazards is assayed in the following sections of this paper. 
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To help assure that these policies are implemented, research activi- 
ties are monitored by the Council's Board of Directors, by the Office of 
Research Advisory Committee, and, in some instances, by special advisory 
committees appointed for specific projects. These committees, which meet 
periodically to assess research progress and data collection methods, 
emphasize appraisal of the scientific merit of research projects, the 
rights of the individuals who participate as subjects in these projects, 
and the relative benefits and risks to the subjects which may evolve from 
the conduct of the research project (Research Advisory Committee, 1969). 

Administrative Policy and Procedures 
Through an institutional representative, a college or university may 
voluntarily participate in the ACE Cooperative Institutional Research 
Program. At the request of the institutional representative, ACE provides 
a statement of policy and of procedures relevant to maintaining the con- 
fidentiality of data. This statement acknowledges ACE responsibility for 
safeguarding the records of both institutions and individuals within insti- 
tutions and explains the administrative procedures necessary to implement 
the policy. The administrative and ethical basis for these procedures has 
been reviewed and approved by the Public Health Service as an ordinary 
part of Public Health Service grant review practices. Specific procedures 
conform to many (though not all) recommendations made by Sawyer and Schecter 
(1968) and others. 

The regulations can be examined conveniently by using the flow chart 
given in Figure 1. The diagram outlines information acquisition and pro- 
cessing and indicates the physical environments, community of users, res- 
pondents, and interested researchers, and the forms which the data may 
take at the respective stages of processing. 

ERIC 
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At the institutional level, the respondent group comprises all indivi- 
duals within the participating institution who provide information about 
themselves during the questionnaire survey. Freshmen at approximately 
1200 colleges and universities constitute the major respondent population 
in ACE programs. The personnel at the institution are entirely responsible 
for administering and collecting quesionnaires ; the ACE Office of Research 
furnishes guidelines in order to expedite the process. Questionnaires are 
usually administered to a monitored group under stable conditions during 
the first two weeks of the academic year. 

The questionnaire contains a statement addressed to the respondent 
that briefly describes its research function and tells why identifying 
information is necessary. The respondent is also encouraged to cooperate 
in the research, under the acknowledgement of ACE responsibility for main- 
taining the confidentiality c£ the data. The American Council on Education 
has no authority to demand that the student respond to the questionnaire, 
although the institutional authority may indicate that he should complete 
it. (The issue of the "voluntariness" is examined in more detail below). 

Under the direction of the institutional representative, the question- 
naires are packaged and forwarded to a commercial service bureau for pro- 
cessing. There they are maintained in locked files *ind destroyed when 
processing is completed. At the service bureau, marks on the question- 
naires are optically scanned and recorded on magnetic tape. An ancillary 
benefit of machine processing is the reduction in the possibility that 
the data will be misused in that human handling of the documents is mini- 
mized. The product of the optical scanning operation is a statistical 
file which contains all responses submitted by persons within each institu- 
tion and which uses arbitrary identification rumbers to facilitate the 
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merging of data for followup studies and for accounting purposes. Other 
than this, the files identify neither the individual respondent nor the 
institution. 

In a separate operation, identifying information is recorded on 
punched cards and then transferred to magnetic tape. This name -and -address 
file contains no questionnaire responses other than the identifying infor- 
mation. Both the raw statistical file and the name -and -address file are 
shipped separately to the ACE Office of Research for further coding and 
for data consolidation and analysis. If name -and -address files and statisti- 
cal information were matched, the total file would comprise an "intelligence 
system,” as described by Dunn (1968), for example, which identifies indivi- 
duals as such. However, additional coding at ACE comprises the basis for 
a double linkage protection system which prevents such matching even by 
the Office of Research personnel. 

The double linkage system is illustrated schematically in Figure 2. 

Each individual record in a given statistical data file is assigned a 
unique (arbitrary) accounting number. This series of numerals corresponds 
to Set 1 in the diagram. Each record in the corresponding name-and -address 
file is assigned another different accounting number (see Set 2). A code 
array (CA) of numbers, which match numbers in Set 1 to the corresponding 
one in Set 2 is created. The code linkage is maintained by a private 
organization under contract to (a) allow no direct access to the code 
system to anyone, including ACE staff, and (b) merge existing accounting 
numbers with new ones. ACE copies of code linkage are destroyed. In 
order to implement followup studies (Figure 3) more recent statistical 
data are assigned new accounting numbers (see Set 3). A new code linkage 
(CA') is then defined and translated by the service organization to the 
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original system. Merges of statistical data occur without the problems 
involved in handling statistical and name -and -address files jointly. Acci- 
dental or deliberate disclosure of previously collected individual records 
is impossible simply because the linkage code is not in ACE possession. 
Since the service organization is outside the United States, the codes 
which they contain are not subject to local or national regulations. 

At the ACE level of processing, the name -and -address files are main- 
tained at a commercial service organization under the series of administra- 
tive constraints given in the Department of Defense Industrial Security 
Manual (1966) for "CONFIDENTIAL CLASSIFICATION." That is, the magnetic 
tapes which contain identifying information are kept in locked storage, 
and their use is monitored by bonded guards in compliance with clearly 
specified security regulations. They are removed from storage only for 
those brief periods when envelopes for followup questionnaires are being 
addressed and only by written permission of the ACE Director of Research. 
All usage is systematically reported under the surveillance system. 
Accounting controls include receipt and dispatch records from each person 
handling these tapes, dates and time period of usage, and tape description. 
When they are being used, they are under surveillance to insure that they 
are neither copied nor misused. "Misuse" would include, for example, com- 
puter generated lists of names and addresses for commercial mailhouses. 

The statistical files are maintained by the ACE computer programming staff 
and are not subject to the same rigid controls prescribed for name -and - 
address files, the degree of control being largely a function of the form 
and substance of the particular statistical file. 
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The data are so extensive that, even if one had full access to the 
statistical files and documentation, it would be virtually impossible to 
match individuals and their responses. The same holds true for institu- 
tions. The statistical files and relevant documentation are monitored by 
the ACE professional staff to the extent that administrative and proces- 
sing restrictions are necessary. 

The statistical data are consolidated and then summarized in various 
printed forms for the community of users outside the ACE Office of Research. 
The form is determined by the particular user. Specifically, each institu- 
tional representative receives a statistical summary of responses to all 
questionnaires administered within his institution. This Institutional 
Repor t conta ins no information on individual respondents. To safeguard 
institutional privacy, the ACE refuses to send to an institution another 
institution's report, although it does advise those researchers and admini- 
strators who want to exchange or compare their institutional reports to 
contact each other directly. A second form of report. National Norms for 
Entering Freshmen (Creager, et al . , 1968), is a statistical summary of 
all data for a particular year and is provided to each participating insti- 
tution and made available to the general public. It identifies neither 
particular institutions nor individuals. The statistics it provides allow 
administrators and institutional researchers to compare their institution's 
attributes (as defined in the Institutional Reports) with those of a large 
well-specified sample of institutions. 

Other analyses of the national data, in aggregate crosstabular form, 
are available to the community of users, including the participating insti- 
tutions. Detailed regulations regarding access to data currently available 
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from the ACE Data Bank are provided in the User 1 s Manual (Bayer , et al . , 
1969). Generally, individual researchers must make requests in accordance 
with specific procedures described in cnis manual. No individual identi- 
fying information , alone or in conjunction with records of responses, are 
in the domain of information available to the researcher under this data- 
accessing system; this information is entirely statistical in nature. 

Members of the Office of Research staff can develop special analysis for 
outside use from statistical files alone, thus eliminating accidental mis- 
handling or misuse of the identifying information. 

In previous years, a merged data file of individual responses, toget- 
her with identification data within a particular institution, was created 
upon written request of the institutional representative, conditional 
upon written agreement by the institution's president to (a) maintain the 
confidentiality of the data and (b) use the data for research purposes 
only. For a brief period in 1968, this was altered: Institutions wishing 

to obtain individual statistical data for local research purposes did so, 
but identifying data were not provided. If the institution wished to merge 
ACE data with other individual data collected locally, the merging was 
done at cost by the ACE staff and the merged file returned without iden ti- 
fying data . The only condition under which ACE statistical and identifying 
data are provided to the institution is met when the questionnaire has been 
administered under circumstances in which the student has been clearly 
informed in advance that the data would be returned to his institution for 
use in local research projects. All institutions requesting tape copies 
of individual student data, with or without identifying information, must 
first provide ACE with specific written assurance that the confidentiality 
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o f the data will be protected, that data will be used only for research 
purposes, and that no data will be entered into any of the official records 
or files of the institution. 

Current Problems and Alternative Solutions 

At each level of the information system outlined in Figure 1, there 
are potential difficulties in maintaining confidentiality of data. These 
problems usually present the researcher with some genuine opportunities 
for educating himself, and, perhaps more importantly, the respondent and 
other interested individuals. The solution of problems in this particular 
educational environment may be applicable to other larger systems of research. 
Ques tionnair e Adminis tr at ion 

The first level illustrated in Figure 1 represents the distribution, 
completion, and collection of questionnaires at the participating institu- 
tion. Since identifying information appears on each questionnaire, this 
step represents a reduction in the ACE Office of Research staff's control 
of data confidentiality. That is, students or college personnel ma£ have 
access to an individual record or a group of records. The members of the 
participating institution then become responsible for safeguarding' the 
individual respondent's data, as they are in any situation where an insti- 
tution requires students to provide information for institutional use. In 
cases where most questions are innocuous or useless for purposes other than 
research, the threat is lessened but not eliminated. 

Like administrative records, questionnaire data may be used to per- 
suade, influence, or intimidate students. To the extent that college 
personnel and students endorse the principle of confidentiality and behave 
accordingly, the threat is not crucial. Thus far, most insitutions acknow- 
ledge responsibility to treat document administration and collection confi- 
9 dentially. 

ERIC 
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More formal provisions for controlling questionnaire administration 
are possible. The ACE Office of Research staff has considered a variety 
of alternative techniques. Physical security might be enhanced if respon- 
dents placed completed questionnaires in locked addressed boxes which 
would remain unopened until the data processing was initiated. Or the 
collection, packaging and mailing of completed documents might be done 
under the surveillance of local student, faculty, and administrative repre- 
sentatives, a procedure analogous to one proposed by Sawyer and Schechter 
(1968) for the National Data Bank System. More simply, the questionnaire 
could be constructed so that the identifying information is detachable 
from that portion of the document on which responses appear, and the 
identification section and completed questionnaires collected separately. 
Arbitrary identification numbers imprinted on both documents would permit 
later collation. The procedure, though not unwieldy, is expensive: The 

pr less quoted by a major commercial optical scanning processing organize 

3 

tion are approximately $5000 to $7000 higher than common processing costs. 

The types of controls mentioned may generally be too expensive, complicated, 
or time-consuming to be appropriate in most situations. Perhaps more important- 
ly, very elaborate regulations and procedures could provoke mistrust or suspi- 
cion that would interfere with the research or with the operations of the 
institution. That is, if one implies that suspicion is warranted, then 
feelings of suspicion may increase or persist unnecessarily. So far, infor- 
mal surveillance by local administrative personnel seems to be suitable for 
the general case. 

^Based on a sample of 300,000 and a 4-page document; identification 




consists of name and address. 
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The ACE policy has been to encourage and solicit cooperation by the 
respondent (i.e., the student). The participating institution usually 
uses the same approach, in effect, by administering the questionnaires. 
Information describing the purposes of the research and the nature of the 
research organization are given on the questionnaire and by the institu- 
tional representative to explain and encourage participation. The 
"voluntariness" of the situation is subject to modification by each col- 
lege. Questionnaire completion may be designated as being highly desir- 
able or as almost mandatory. There appears to be some justification for 
the college's requiring freshmen to complete the questionnaire, in that 
data is frequently collected in order to provide summary information that 
will aid in planning future admissions policies, revising curricula, etc. 
Longitudinal research on improving the educational process is important 
to the institution and, presumably, to the student. In addition, the 
Federal government and private funding agencies have given substantial 
support to such longitudinal research. Insofar as the student feels that 
he cannot conscionably respond to questions relevant to social science 
or educational research, then conflict will arise, but may be minimized 
if the justification for and restrictions on the research function are 
made clear to the respondent. Such explanation, by providing the 
student with some understanding of the purpose of the research and the 
ways in which the data will be used, may help enlist his cooperation. 

At the other extreme, the administrative control may be too lax and 
the degree of "voluntariness" too great. For instance, students may be 
advised to "complete the questionnaire and return it, if (they) feel like 
This situation occurs infrequently since ACE provides explicit 



doing so." 
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ins true t ions for questionnaire administration (data from schools with too 
low a response rate is not included in the normative reports). Insofar as 
unstable situations undermine the reliability, completeness, and, therefore, 
the validity of the data, such an environment is undesirable. To the extent 
that the situation is made stable, but the voluntary aspect maintained, the 
difficulty is ameliorated. 

Questionnaire Processing Services 

At the second level of the information system, that of the optical 
scanning of questionnaires and the production of magnetic tape records 
(name -and -address files and statistical data files), data may be misused, 
inasmuch as completed questionnaires usually include respondent identifi- 
cation. Irregular data usage at this level could take several forms, condi- 
tional on the type of information solicited in the questionnaire and the 
environment under examination. The most likely is reproduction of tapes, 
including identification, for commerfital exploitation (e.g., mailing lists). 

If safeguarding magnetic tape record confidence is an important objec- 
tive of the researcher, then endorsement of a relevant code of ethics by 
professionals in the computing disciplines is a reasonable expectation. 
Creation and endorsement of a code provides some clear basis for recognizing 
the existing hazards and examining strategies to avoid or minimize them. 
Although members of the Association for Computing Machinery have discussed 
guidelines for professional conduct in data processing — some of them rele- 
vant to the matter of confidentiality- -actual results are disappointing. 
Although some members of the electronic data processing community recognize 
that an explicit code is desirable, other AAMC members appear to lack 
interest, and this indifference is one of the reasons that no code has been 
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adopted. Indirect pressure for code adoption on both commercial and pro- 
fessional organizations may be exerted by government agencies. For example, 
the Public Health Service (1968) requires that persons to whom grants are 
awarded for social science research acknowledge ethical policies and appro- 
priate administrative procedures relevant to guarding against invasion of 
privacy. Insofar as researchers use computing facilities in which hazards 
are potential, ethical codes are desirable. When individual researchers 
utilize commercial computing facilities, the situation can be clarified 
somewhat if the service group endorses an appropriate policy. Requirements 
for safeguarding privacy of records can be included into contracts and so 
strengthen the efficacy of a desirable policy. 

Physical security in the data-processing environments would involve 
chiefly some sort of automated protection for tape or disc files. However, 
computer manufacturers acknowledge that little effort has been made toward 
developing and selling hardware/software devices which have protection 
functions. There appear to be three major reasons for this lack of atten- 
tion (Fanwick, 1967). First, competition among manufacturers is such that 
the development of such devices is not considered crucial unless there is 
a substantial demand for them. The demand is low, probably because of 
the social scientist's naivete regarding computing devices and the computer 
scientist's indifference to or ignorance of the problems of this user group. 
Difficulties of undermining current administrative procedures and mechani- 
cal devices (such as locked storage rooms, safes, and tape locks) are 
sufficient to impede or discourage most attempts to misuse the data. More- 
over, the costs required in development of new hardware/ software devices 
may not result in systems which provide much more protection than current 
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systems provide (Weismann, 1967). Third it can be argued that in the 
data-processing environment, records are not available to persons without 
special skills and that this population of persons competent enough to 
misuse the data purposely is too small to justify anxiety. But this argu- 
ment is not particularly meaningful in that one single individual is cap- 
able of misusing hundreds of thousands of records. 

The limited size and nature of the relevant community of potential 
violators is an important factor, however, since it means that adherence 
to existing, commonly used guidelines, notably the Department of Defense 
Industrial Security Manual (1966), can be monitored and controlled. Fur- 
ther, by including liability and negligence clauses into contracts with 
individuals or organizations, effective incentives for continued atten- 
tion to the privacy issue can be provided. 

Banshaf (1968) gives an expository account of the legal pitfalls, in a 
rather general context, relevant to computing facilities. While not dis- 
cussing the confidentiality issue specifically, he does emphasize the 
difficulties of applying legal principles to a variety of problems in 
this technological environment. At the very least, his article strongly 
suggests the need for giving legal attention to the computer -re la ted 
enterprises and for specifying requirements for maintenance of confidenti- 
ality in contracts with service groups. 

Office of Research Operations 

At the ACE level of the information system, statistical information 
is analyzed and results disseminated to the public. In addition, followup 
studies are conducted, which require the use of name-and -address files. 

ACE identification numbers in these files and in the existing statistical 
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data files are the basis for matching and merging data. Since potential 
difficulties arise with respect to access to the name-and-address files, 
more rigid or diverse controls of this access may be desirable, depending 
on the nature of the threat to confidentiality and on the source of objec- 
tions to current operations. Various safeguards for confidentiality are 
considered here. The first depends largely on administrative regulation 
rather than on mechanical or automated procedures. An alternative device 
relates to computing and data processing methods. Yet another procedure 
involves capitalizing on the statistical nature of data analysis. 

Consider, first, some of the problems that may be inherent in pre- 
sent administration procedures. For instance, it may be unwise to invest 
control in a single individual. His personal attributes (or eccentrici- 
ties) become too important and his absence, regardless of his character, 
may cause unnecessary inconvenience in operating the system. Sawyer 
and Schechter (1968), Dunn (1968), and others have suggested devices for 
the National Data Bank System which would ameliorate problems in this 
context. A "neutral" organization including members of respondent groups 
and of interested professionals might function as a surveillance or key 
control unit in combination with the Director of Research. A second plausi 
ble alternative procedure is to extend direct responsibility to other pro- 
fessional staff members of the Office of Research. 

The first possibility entails considerable effort, as well as the 
cooperation of persons outside the ACE organization and so it not possible 
at present, though its future implementation is being considered among 
other long-range Office of Research goals. Both alternatives have the 
disadvantage of being more bureaucratically complex and time-consuming 
than the current method. 

ERIC 



-31- 



The second device , which does not depend on in-house administrative 
regulations, might involve a computer hardware /software system which per- 
mits merges of data while completely denying any individual direct access 
to internal name-and-address files « Figure 3 contains a schematic diagram 
of such a system. The illustration shows a process in which more recently 
obtained identifying information is matched with existing name-and-address 
files and assigned accounting numbers used in the current system. The 
operation is conducted without permitting any person to handle directly 
existing name-and-address files. Matching is conducted independent of 
existing or newly obtained statistical files. A second match of current 
assigned accounting numbers and the arbitrary accounting system is used 
with the new data. The merge operation which combines new and existing 
statistical data is based on the accounting system associated with the 
existing name-and-address files. 

If such a system indeed prevents access during operations, its impor- 
tance cannot be underestimated. By making direct linkage of name-and- 
address information and statistical data impossible, no attempt (legal or 
otherwise) could possibly threaten the confidentiality of the records and 
thus the integrity of a single person would no longer be an issue. However, 
a hardware/software system of this type is not currently available, although 
some systems can be developed to meet requirements at least partially. 
Relative to current administrative and mechanical devices, systems which 
completely eliminate accessibility would be considerably more expensive. 

Consider now the third alternative device, that which involves the 
form of the statistical data on which analyses are based. Typically, the 
researcher attempts to maintain an isomorphic relation between a person's 
responses on a questionnaire and records of these responses transformed to 
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magnetic tape or card form. But the coats of a perfect relation are 
prohibitive; data editing and cross-checking minimize deviations from 
the original responses. The nature and magnitude of error involved in 
this process have never been well documented. Suppose we assume that 
the accuracy of these records is fairly close to the accuracy required 
in business records; the records are reliable enough to be used meaning- 
fully by the researcher. 

possibility of data use or misuse is, of course, weakened 
when data are not reliable for any specific individual record. Frequently, 
the researcher can afford to undermine deliberately the integrity of a 
single record but preserve the integrity of the whole, at least with re- 
spect to statistical parameters. He does this by innoculating statistical 
data files with randomized error whose properties are known. A large body 
of literature deals with the problem of adjusting statistical estimates 
of population parameters, when the observations are subject to known mea- 
surement error. This procedure merely capitalizes on the statistical 
literature and on existing programs for generating (nearly) random numbers 
with specified parameters. 

The "innoculation" accomplishes a number of important objectives. 
First, in the context of public interest in survey research, confusion 
between evaluative instruments, eavesdropping devices, administrative 
records, etc., may be minimized. The researcher can acknowledge the 
controlled unreliability of any individual record, a notion that is sim- 
pie enough to communicate to the public. Second, the likelihood that 
records will be used in court litigation and in judicial or legislative 
inquiries is reduced substantially. Until jurimetrics (see Solomon, 1968) 
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becomes a solid basis for forming judgments about personal attributes or 
the behavior of a specific individual, this device should be an effective 
deterrent against legal use of individual survey research records. A dis- 
tinct advant age is that neither the researcher nor the research community 
can obtain unambiguous information about specific persons, even if identi- 
fication is, in fact, accomplished. 

Observations on the Legal Environment 

Conceivably, public or private investigatory agencies may have an 
interest in an individual's reponses to an ACE Office of Research question- 
naire. Threats to the maintenance of data confidentiality are possible 
regardless of the innocuousness of the responses, regardless of the degree 
of anonymity, and the threat increases if the survey assesses controversial 
beliefs or behavior. Because the ACE Office of Research has acknowledged 
responsibility for safeguarding respondent privacy, it is constantly exa- 
mining the possibility of such inquiry. The following discussion is restrict 
ed to ways of reducing the risk to the researcher and to the survey respon- 
dent. 

Consider some situations in which legal inquiry into survey results 
might be plausible. For instance, the investigatory agency may express 
interest in rather innocuous, "standard" information, such as the n a m es and 
addresses of survey respondents within a specific institution. Frequently, 
this information is already public. That is, it can be obtained through 
published institutional membership lists, student telephone directories, 
etc., and the researcher in possession of identical information is not 
confronted with a problem; the investigatory agency can obtain the data 
more efficiently and easily from the public sources. Similarly, sex, age. 
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citizenship, state of origin, and other variables are occasionally public 
information. Moreover, direct information on specific individuals can be 
obtained more efficiently and probably more reliably through the investi- 
gatory agency's own facilities. The major difficulty, of course, occurs 
in those situations where responses may not be so innocuous. For instance, 
in our current research on campus unrest, we are attempting to examine 
variables antecedent to a student's opposition, activism, or indifference 
to protest activities. Changes in attitudes over time are exceedingly 
interesting, and are important if we are to judge the impact of campus 
unrest on the student and on the institution. In an atmosphere of dis- 
approval toward unrest or even toward research, the acquisition of rele- 
vant data presents some problems. That is, public or private agencies 
may have an interest in using the data for judgments about specific indivi- 
duals — an application which is not intended by the researcher. 

When the solicited information is general rather than specific, the 
risk of possible damage to respondent and researcher is minimized but not 
eliminated. For instance, it is unlikely that a student who acknowledges 
that he participated in a protest but does not specify time or place will 
be subjected to punitive legal action. The standard regulations preventing 
disclosure of information would seem to be sufficient to discourage inquiry 
from private agencies. Moreover, the ACE Office of Research usually asks 
for rather general information, a strategy which not only protects against 
outside interference but also minimizes the instrusiveness of the questions. 

In some instances, however, the researcher requires some specification 
of behavior. In more detailed interview surveys, for example, a respondent 
may provide the ACE Office of Research with detailed information, for research 
purposes only and under a promise of confidentiality. Public or private 
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investigation of an individual protocol may then be intrusive. Under 
extreme circumstances, the behavioral researcher may have to choose bet- 
ween violating his promise of confidentiality or being subjected to pro- 
fessional castigation or even legal punitive action. TWo issues are rele- 
vant here: The likelihood of the situation's occurring and the protection 

afforded to respondent and researcher in the event it did occur. We can 
consider these issues as they apply to the response and to the circum- 
stances in which specific information was solicited. 

Although the possibility that survey data will be subpoenaed is a 
frequently mentioned bugaboo, the likelihood of this event's actually 
happening is rarely assessed. Behavioral researchers, research partici- 
pants, and others who perceive such a threat usually do so on emotional 
grounds rather than through systematic examination of the particular sur- 
vey circumstance. It should be pointed out that so far in no instance has 
a subpoena of behavioral research survey data been effected. This lack 
of legal precedent can be interpreted in several ways. First, individual 
records directly relevant to investigatory objectives can usually be ob- 
tained easily through other agencies. Thus, an investigatory group has 
no need to solicit information which is of dubious relevance to its interests 
«nH which involves direct interference in social science research. Further- 
more, as was pointed out in the previous section, statistical reliability, 
or accuracy, of an individual record from a survey research information 
system must be considered if such records are to be introduced into formal 
litigation. Such survey records frequently do not conform to the accuracy 
of business records. The original survey questionnaires contain no signa- 
tures, and records of such documents are subject to well known psychometric 
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limitations (i.e., unreliability of responses, and inaccuracy of data 
processing and of information transmission). 

In short, the survey research record is unlikely to have any value 
for use in litigation against a specific respondent. It is doubtful that 
the survey record conforms to the business exception to the hearsay rule 
and the best evidence rule. Banshaf (1968) describes these legal regula- 
tions in the context of magnetic tape and punched card reproduction of 
business documents. Regulations to which judicial agencies must conform 
are not consistently relevant to legislative inquiry (e.g., Senate sub- 
committee subpoena) or private investigation, however. The information 
protection system at the ACE Office of Research minimizes the possibility 
of improper disclosure to both public and private agencies, simply because 
crucial codes are not available to ACE personnel. Lacking this procedure, 
the proposed deliberate injection of statistical error into records would 
substantially reduce the likelihood of individual record usage for pur- 
poses other than research. 

The sociolegal aspects of the confidentiality issue are frequently 
paradoxical. The following discussion gives examples of inconsistencies 
in the current situation. Historically, social scientists have had no 
general legal protection for information obtained under a promise of con- 
fidentiality. Indeed, only recently has the research participant's right 
to privacy of personality been acknowledged by judicial and legislative 
action (see Reubhausen and Brim, 1965). For the researcher, the so-called 
privileged communication laws for psychologist -client relations might appear 
to be relevant, but these regulations are statutory (extant in only 18 
states) and have been applied in rather limited situations. Moreover, it 
is doubtful whether these laws can be applied to the questionnaire or inter- 
view survey in behavioral research (Reubhausen and Brim, 1965). 
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One rather interesting exception to the prevailing situation should 
be mentioned: Researchers at the U.S. Census Bureau receive constitutional 

protection for the kind of survey research which is often similar to the 
type of research considered in this paper. Census Bureau employees are 
legally bound to maintain confidentiality; punitive action may be taken 
against violators. The subpoena of records is blocked effectively by legis- 
lation, and the guarantee of protection from investigatory action based on 
individual records has been upheld by the courts. Unfortunately similar 
protection for other researchers is not likely to be instituted in the near 
future. This inconsistency can be considered discriminatory. 

Another basic inconsistency occurs with respect to requirements for 
the acquisition of Federal grants in behavioral research. The U. S. Depart- 
ment of Health, Education and Welfare regulations (1969, p. 4) specify that 
potential risk to the respondent in survey research be considered. A simi- 
lar provision is made in the regulations of the Presidential Office of 
Science and Technology (see Science , 1967), which emphasize possible dis- 
closure of private information acquired by the researcher and possible 
violation of informal consent under the promise of confidentiality. The 
regulations are loosely defined but mandatory, and the grantee is required 
to define implementation policies. However, although the researcher must 
promise confidentiality, he is afforded no protection against a threat to 
his promise. If a public investigatory agency can make some attempt to 
force disclosure, and succeed, these prescriptions are gratuitous at best. 

Even though legislative or judicial inquiry into individual records 
is unlikely and even though strategies are employed to minimize private 
or public interest in such inquiry, the need for a legal definition of 
rights and obligations remains. Ruebhausen and Brim, in a detailed 
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examination of these questions, have offered suggestions for their resolu- 
tion: One is that privileged status be extended to information acquired 

by the social scientist, another, that civil or criminal remedies for 
breach of the right of privacy be provided. 

Unfortunately, none of these suggestions are likely to receive inmediate 
attention, evaluation, and action by the courts or legislative agencies. For 
the time being, heavy reliance must be placed on ethical codes, and on admini- 
strative procedures for their implementation within the particular survey 
condition. To these ends, the social scientist must devote serious effort 
to evaluating and implementing alternative strategies at each level of the 
information system. 

Some Research Possibilities 

In examining the confidentiality issues, and the alternative strate- 
gies for insuring individual privacy, there are some rather important inade- 
quacies in our knowledge. We can, for example, consider the concepts of 
respondent anonymity and privacy to be determined by social factors. Research 
to establish relationships between these concepts and various reference 
groups— respondents, researchers, observers— may be very useful. Degrees 
and categorical variations of anonymity can be defined and evaluated with 
respect to these groups. Reubhausen and Brim, (1965) provide an example 
of the utility of this idea in a sociolegal context. Furthermore these 
variables can be systematically evaluated with respect to influence on 
response rate, and their links with socioeconomic attributes of respon- 
dnets. Hartnett (1967) has completed a study which provides data on 
relationships between levels of anonymity and responses to various types 
of psychological test questions. 
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The intrusiveness of questions may be strongly related to the common 
psychological concept of "social desirability" of responses (Cronbach, 

1960). In effect, the response is a function of i.s desirability rela- 
tive to various social criteria. The interactions of these concepts when 
an individual takes the role of respondent, researcher, and observer could 
be interesting. It is likely that various methods of measuring the 
traits of privacy, anonymity, and intrusiveness are related; systematic 
assessment of the relations would be informative (see Campbell and Fiske, 

"Convergent and discriminant validation," Psychological Bulletin . 1959.) 

Other variables which may influence response rate are feedback directed 

to the students on the survey and the type of college attended by the students. 
Survey researchers have only infrequently provided feedback to respondents 
based on statistical results. If results of studies were provided for 
participants perhaps response rates could be increased. Also, since the 
type of college- -and whether it makes completion of questionnaires manda- 
tory or voluntary — appears to be connected with student objections to 
participation, a systematic study revealing the relationships between 
response rates under different conditions of "voluntariness" and the types 
of groups responding would be useful. 

There are, of course, some important incentives for conducting such 
research. Surveys on relatively innocuous topics are commonplace. As 
surveys on more controversial topics expand, social questions implied by 
the concepts of voluntariness, intrusiveness, and anonymity must be answered, 
if only to maintain a basis for future research. A more efficient proce- 
dure for administration of questionnaires can be developed based on recogni- 
tion that sampling requirements are a function of the response rates of 



o 
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various groups and that these rates are affected by questionnaire attri- 
butes like those considered here. If productive, such research can pro- 
ably be used to strengthen and clarify the rather recent growth of privacy 
as a legal and social prerogative of the individual. Such applications are 
not far removed from the use of statistical concepts in litigation as des- 
cribed by Solomon (1968). The ultimate incentive, of course, is the respon 
sibility of the researcher to protect his subjects. The safeguards against 
intrusion of respondent privacy can be well defined only when the nature 
and extent of hazards to it are well specified. 
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Environments : 



(1) PARTICIPATING INSTITUTION 

(2) ELECTRONIC DATA PROCESSING SERVICE ORGANIZATION 

(3) AMERICAN COUNCIL ON EDUCATION OPERATIONS 

(4) PARTICIPATING INSTITUTION RESEARCH 

(5) GENERAL COMMUNITY OF RESEARCHERS 




Figure 1. Information Flow and Environments 



-42- 

RECODING 




(SET 1-2 LINKAGE) 



Figure 2. Link File Creation 




SET CA' 

(SET 2-3 LINKAGE) 



SERVICE 

GROUP 



SET -3 LINKAGE 




MERGED 

STATISTICAL 

DATA 



Figure 3. Merge Process 
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STATISTICAL DATA A2 
a + STATISTICAL DATA B2 




Figure 4 . Schematic Chart: No Access Data Merge 



STUDENT INFORMATION FORM 



YOUR NAME (please print) 

Middl* or M «id*n Lott 

HOME STREET ADDRESS 



L£!!l Sw« Zip Codt (if knMwn) 



When were 
you born? 



Your Social 
Security Number 
(please copy 
carefully) 



818732 

i i rrn 



— 1 — 
1 
1 
1 




1 

1 

1 

• 




• 

• 

1 

1 




Month Day Year 
(01-12) (01-31) 




1 1 
1 1 
1 1 
1 1 


1 

1 

1 

1 


1 1 1 
1 1 1 
1 1 1 
1 1 1 



n 


®®®o® 


VC 


©®®o© 


C 


®©©o© 


X 


©®©o© 


X 


®0®O© 


VC 

£ 

H 


®©0O© 


®®0O© 


O 

z 


®®®o® 


o 


®®®o® 


U 


®®®o® 



NOTE: 

The information in this report is being collected for the American Council on 
Education as part of a continuing study of higher education. Your cooperation 
in this research will contribute to an understanding of how students are affect- 
ed by their college experiences. Identifying information has been requested by 
the Council in order to make subsequent mail follow-up studies possible. Your 
responses will be held in the strictest professional confidence, and will be 
used onl y in group summaries for research purposes. 



@©0©@@@@© 

OOQOQOQOO 

©©©©©©©©© 

©©©©©©©©© 

©®©00©0©© 

©©©©©©©©© 

©©©©©©©©© 

©®0®®®®®® 

®®®0©©©0© 

®®©®®®®®® 



DIRECTIONS: Your responses will be read by 
an optical mark reader. Your careful obser- 
vance of these few simple rules will be most 
appreciated. 

Use only black lead pencil (No. 2 Yi or softer). 
Make heavy black marks that fill the circle. 
Erase cleanly any answer you wish to change. 
Make no stray markings of any kind. 

Yes No 

Example: Will marks made with ball pen 01 ® d 

fountain pen be properly read? 



1 . 


Your Sex: MaleO 






2. 


How old will you 


be on 


December 31 of this 






year? (Mark one) 












16 or younger .... 


o 


20.. 




.o 




17 


o 


21.. 




.o 




18 


o 


Older than 21 


.o 




19 


o 








3. 


What was your average grade in 


secondary 






school? (Mark one) 










A or A+ ... O 




B-.. 


....o 






A- O 




C+ . 


....o 






B+ 0 




C... 


....o 






B O 




D... 


....o 





4. To how many colleges other than this one did you 
actually apply for admission? From how many did 
you receive acceptances? (Mark one in each column) 



Applications Acceptances 



No other O. 

Ore O. 

Two O. 

Three O. 

Four O. 

five O. 

Six or more 0. 



.o 

o 

.o 

.o 

.o 

.o 

•O 



c 



5. Mark one: 

This is the first time I have enrolled in college as a freshman. .O 

I came to this college from a junior college O 

I came to this college from a four-year college or university .O 



6. The following questions deal with accomplishments that might possibly apply 
to your high school years. Do not be discouraged by this list; it covers many 
areas of interest and few students will be able to say "yes" ic many items. 



(Mark all that apply) 

Was elected president of one or more student organizations (recognized Yes 

by the school) O 

Received a high rating(Good, Excellent) in a state or regional music contest. . © 

Participated >n a state or regional speech or debate contest 0 

Had a major part in a play O 

Won a varsity letter (sports) Q 

Won a prize or award in an art competition 0 

Edited the school paper, yearbook, or literary magazine 0 

Had poems, stories, essays, or articles published 0 

Participated in a National Science Ko 'idation summer program 0 

Placed (first, second, or third) in a state or reg ional science contest 0 

Was a member of a scholastic honor society 0 

Won a Certificate of Merit or Letter of Commendation in the National 
Merit Program 0 



7. What is the highest academic 
degree that you intend to 
obtain? (Mark one) 



None O 

Associate (or equivalent) O 

Bachelor’s degree (B. A., B.S..etc.)0 
Master's degree(M.A., M.S.. etc.) . O 

Ph.D. or Ed.D O 

M.O., O.O.S.,or D.V.M O 

LL.B. or J.O O 

B.D O 

Other O 



8. Do you have any concern about your 
ability So finance your college edu- 
cation? (Mark one) 

None (I am confident that I will 



have sufficient funds) 0 

Some concern (but I will probably 

have enough funds) O 

Major concern (not sure I will be 
able to complete college) O 



9. Are you o twin? (Mark one) 

No O 

Yes, identical O 

Yes, fraternal same sex O 



Yes, fraternal opposite sex .... O 









ft ft ft 

g X g 
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* i £ 



2 22 



10. Through whot source do you in- 
tend to f inonce the first veor of 
your undergroduote educotion? 

(Mark one in each tow ) 

Personal savings and or employment.© OO 

Parental or other family aid .. ooo 

Repayable loan OOO 

Scholarship, grant, or other gift ....OOO 



11. Whot is the highest level of formol educotion ob* 
toined by your parents? (Mark one in each column) 

Father Mother 

Grammar school or less.0. .O 

Some high school O. O 

High school graduate. . O. O 

Some college O. .O 

College degree O. .O 

Postgraduate degree . . O .O 



12. Whot is your best estimote of the totol income 
lost year of your parental family (not your own 
family if you ore morried)? Consider onnuol in- 
come from oil sources before taxes. (Mark one) 

Less than $4.00(0 S15.000-S19.999 .0 



54.000- S5.999 . . .O 

56.000- S7.999 . . .O 

58.000- S9.999 . . .O 

510.000- S14.999 .0 



520.000- S24.999 .0 

525.000- S29.999.O 
$30,000 or more .O 



13. Whot is your racial background? (Mark one) 

CaucasianO Negro. .O American Indian. O 
Oriental O Other O 



14. Mark one in each in Y ™ P,e *”‘ t 

Which You Religious 

column: were Reared Preference 

Protestant .O O 

Roman Catholic .O O 

Jewish .O O 

Other .O O 

None O O 



15. How would you rote the academic standards of 
your high school? (Mark one) 

Very high O 

Fairly hi£i O 

About average O 

Probably below average O 

Definitely below average O 



16- Where did you ronk acodemi colly in your high 
school graduating closs? (Mark one) 

Top 1%....0 Top 10%. .O Top Quarter O 

2nd Quartet O 3rd Quartet O 4th Quarter. O 



17. Where did you live for most of the time while 
you were growing up? 

On a farm O 

in a small town O 

In a moderate size town or city, O 

In a suburb of a large city O 

In a large city O 



O 

ERIC 

himnaffamiaaa 
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18. During the post year in school, how often did the following statements apply 
to you? (Mark one in each row) 



Always Usually Sometimes 



Rarely 
or Never 



Turned in assigned work on time O. 

Had trouble concentrating on assignments . .O. 

Kept my desk or study place neat O. 

Was too bored to study O. 



o o o 

» . . . . ......... ^3. ........ 



.o. 

.o. 



.o. 

.o. 

.o. 

.o. 

.o. 

.o. 

.o. 

.o. 

.o. 

.o. 



Outlined the main points of a reading 
assignment 

Made careless mistakes on a test 

Did my homework at the same time every 

day 

Studied alone 

Put off starting my homework 

Got "exam jitters" 

Fell asleep while studying 

Memorized facts or formulas without 
understanding them . 

Quit before completing a difficult 
assignment 

Shared or reviewed notes with.other 
students 

Checked my work before turning in a paper 
or test O. 

Did unrequited work for extra credit O O. 

Made-up and took my own test for practice. .O O. 

Daydreamed while studying O. 

Got a lower grade than I deserved in a test 
or assignment U. 

Included minor details when taking notes ..O. 

Wasted too much time on bull sessions . . . .O. 

Analyzed my mistakes to be sure I under- 
stood what was wrong 

Carefully went over diagrams or tables in 
the textbook 

Studied with the radio or record player on . V. 

Studied with the TV on O. 

Clarified assignments with an instructor ...U. 



.o. 

.o. 

.o. 

.o. 

.o. 

.o. 

.o. 

.o. 

.o. 

.o. 

.o. 



o. 

o. 

o. 

o. 

o. 

o. 

o. 

o. 

o. 



..o. 

..o. 

..o. 



.o. 

.o. 

.o. 



.o. 

o 



o. 

o. 

o. 

o. 

o. 

o. 

o. 



o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

.o 

.o 

.o 

o 

.o 



o. 

o. 

.o. 

.o. 



o 

:o: 

o. 

o 



o 

o 

o 

o 



Whot is your best guess os to the chances 
that you will: (Mark one in each row ) 


Very 

Good 


Some 


Very 

Little 


No 




Chance 


Chance 


Chance 


Chance 


Get married while in college? 


...O... 


...CL. 


...o... 


...o 


Get married within a year after college? 




...o... 


...CL. 


...o 


Obtain an A-or better over-all grade point average? 


• • "O* . . 


...o... 


...CL. 


...o 


Change major field? 


...O... 


...o... 


...o... 


...o 


Change career choice? 


...O... 


...O... 


...CL. 


....o 


Fail one or more courses? 


...o... 


...o... 


...o... 


...o 


Graduate with honors? 


...CL. 


...o... 


...o... 


...o 


Be elected to a student office? 


...CL. 


...CL. 


...o... 


...o 


Join a social fraternity, sorority, or club? 


...CL. 


...o... 


...O... 


...c 


Author or co-author a published article 7 


...CL. 


...o... 


...o... 


...o 


Be elected to an academic honor society? 


...O... 


...O... 


...CL. 


...o 


Participate in student protests or demonstrations? 


...CL. 


...o... 


...o... 


...o 


Drop out of this college temporarily (exclude transferring)? 


... . . 


... . 0 . . . 


...o... 


...o 


Drop out permanently (exclude transferring)? 


...o... 


...£>.. . 


. . . . . 


....o 


Transfer to another college before graduating? 


...o... 


...JO... 


....o... 


....o 



20. Mark on* in 
each column: 



Alabama O 

Alaska O 

Arizona O 

Arkansas O 

California O 

Colorado O 

Connecticut O 

Delaware O 

D.C O 

Florida O 

Georgia O 

Hawaii O 

Idaho O 

Illinois O 

Indiana O 

Iowa O 

Kansas O 

Kentucky O 

Louisiana O 

Maine O 

Maryland O 

Massachusetts ..O 

Michigan O 

Minnesota — 

Mississippi O 

Missouri O 




ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 

ooo 



Wyoming O 

Canada O 

Latin America... O 

Europe O 

Asia O 

?sr o 



ooo 

ooo 

ooo 

ooo 

ooo 

ooo 
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21 . Mark only three responses, 
one in each column. 

Your probable career occupation. 
Your tattler's occupation. 

^-Your mother's occupation. 

NOTE: If your father (or mother) is deceased, 
please indicate his(her)last occupation. 

Accountant or actuary 0©® 

Actor or entertainer . . . . .0©® 

Architect .0©® 

Artist .0©® 

Business (clerical) 0 ©® 

Business executive 

(management, administrator) 0©® 

Business owner or proprietor 0 0® 

Business salesman or buyer .0©® 

Clergyman (minister, priest) 0 ©® 

Clergy (other religious) © ©® 

Clinical psychologist 0 ©® 

College teacher 0 ©® 

Computer programmer 0 ©® 

Conservationist or forester © ©® 

Dentist (including orthodontist) . .0 0® 

Dietitian or home economist 00® 

Engineer .00® 

Farmer or rancher 0©® 

Foreign service worker 

(including diplomat) © ©® 

Housewife 0©® 



Montana 


-O 


ooo 


Interior decorator 




BUSINESS 




Psychology 


.00© 


Nebraska 


-O 


ooo 


(including designer) 


0©® 


Accounting 


..o@© 


Social work 


.00© 


Nevada 


-O 


ooo 


Interpreter (translator) 


0©® 


Business admin 


.00© 


Sociology 


.00© 


New Hampshire .O 


ooo 


Lab technician or hygienist 


0©® 


Electronic data 




Other r.... 


©@© 


New Jersey ... 


-O 


ooo 


Law enforcement officer ... 


0©® 


processing 


..©@© 






New Mexico . . . 


.o 


ooo 


Lawyer (attorney) 


0©® 


Secretarial studies . . 


..©©© 


OTHER FIELDS 




New York 


.0 


ooo 


Military service (career) . .. 


0©® 


Other 


..©©© 


Agriculture 


.00© 


North Carolina . 


.0 


ooo 


Musician (performer, compose 


t)...0©® 






Communications 




North Dakota .. 


.o 


ooo 


Nurse 


0©® 


ENGINEERING 




(radio, T.V., etc.) 


0 

© 

© 


Ohio 


.o 


ooo 


Optometrist 


0©® 


Aeronautical 


.00© 


Electronics 




Oklahoma 


.o 


ooo 


Pharmacist 


0©® 


Civil 


..00© 


(technology) 


.©©© 


Oregon 


.o 


ooo 


Physician 


0©® 


Chemical 


..©0© 


Forestry 


.00© 


Pennsylvania . . 


.o 


ooo 


School counselor 


0©® 


Electrical 


..00© 


Home economics . . . 


.00© 


Rhode Island . . 


.o 


ooo 


School principal or superintendent® 0® 


Industrial 


..©©© 


Industrial arts 


00© 


South Carolina . 


.o 


ooo 


Scientific researcher 


0©® 


Mechanical 


..©0© 


Library science . . . 


.00© 


South Dakota . . 


-O 


ooo 


Social worker 


.... 0©® 


Other 


..©0© 


Military science ... 


.00© 


Tennessee .... 


-O 


ooo 


Statistician 


0©® 






Physical education 




Texas 


-O 


ooo 


Therapist (physical. 




PHYSICAL SCIENCE 




and recreation. ... 


00© 


Utah 


-O 


ooo 


occupational, speech) 


0©® 


Chemistry 


..©0© 


Other (technical) . . 


00© 


Vermont 


-O 


ooo 


Teacher (elementary) 


0©® 


Earth science 


.00© 


Other (nontechnical) ©0© 


Virginia 


-O 


ooo 


Teacher (secondary) 


0©® 


Mathematics 


• a! ©© 


Undecided 


00© 


Washington . . . . 


-O 


ooo 


Veterinarian 


0©® 


Physics 


..©@© 






West Virginia . . 


-O 


ooo 


Writer or journalist 


0©® 


Statistics 


..©0© 






Wisconsin 


o 


ooo 


Skilled hades 


0©® 


Other 


..©©© 







Other 0 

Undecided 0 

Laborer (unskilled) ©® 

Semi-skilled worker ©© 

Other occupation 0® 

Unemployed © 



22. Below is a list of 66 different undergraduate major 
fields grouped into general categories. Mark only 
three of the 66 fields as follows: 

0 First choice (your probable major field of study). 
® Second choice. 

® The field of study which is least appealing to you. 



ARTS ANO HUMANITIES 

Architecture 0 0® 

English (literature) . . . .00® 

Fine arts 00© 

History 000 

Journalism (writing) ...00® 

Lanprage (modern) 00© 

Language(other) 0 0© 

Music 00© 

Philosophy 00© 

Speech and drama 00© 

Theology 00© 

Other 00© 

BIOLOGICAL SCIENCE 

Biotoff (general) 00© 

Bioc h emistry 00© 

Biophysics 00© 

Botany 00© 

Zoology 00© 

Other 00© 



PROFESSIONAL 
Health Technology 
(medical, dental, 
laboratory) -00© 

Nursing 00© 

Pharmacy 00© 

Predentistry 00© 

Prelaw 00© 

Premedical 00© 

Preveterinary 00© 

Therapy (occupat, 
physical, speech)..©®© 
Other 00© 

SOCIAL SCIENCE 

Anthropology 00© 

Economics 00© 

Education 00© 

History 00© 

Political science 
(government. 



Please be sure that only three circles have been marked in the 
above list. 



(not at all) if you have not performed the activity 
durinc the past year. (Mark one for each item ) 



23. Below is o general list of things that students sometimes do. 
Indicate which of these things you did during the oast year in school 
If you engaged in an activity frequently, mark "F." 
if you engaged in an activity one or more times, but ^ 
not frequently, mark "0" (occasionally). Mark "N" « ^ w 

Mg * 

Voted in a student erection ©@® 

Came late to class ©@® 

Played a musical instrument ©@® 

Studied in the library ©@® 

Checked out a book or journal from the school library ® @® 

Arranged a date for another student ©@® 

Overslept and missed a class or appointment ©@® 

Typed a homework assignment © @® 

Discussed my future with my parents ©@® 

Failed to complete a homework assignment on time ©@® 

Argued with a teacher in class ©@® 

Attended a religious service ©@® 

Participated in a demonstration against the war in 

Viet Nam. ®@® 

Participated in a demonstration against racial 

discrimination ©@® 

Participated in a demonstration against some 

administrative policy of my school ©@® 

Did extra (unassigned) reading for a course ©@® 

Took sleeping pills ©0® 

Tutored another student ©@® 

Played chess ©@® 

Read poetry not connected with a course © © ® 

Took a tranquilizing pill ©@© 

Discussed religion ® @® 

Took vitamins ® @® 

Visited an art gallery or museum ®@® 

Worked in a school political campaign ©@® 

Worked in a local, state, or national political campaign®©© 

Missed school because of illness ©@® 

Smoked cigarettes ®@® 

Discussed politics ®@® 

Drank beet ®@® 

Discussed sports ©@® 

Asked a teacher for advice after class ® ®® 

Had vocational counseling ©@® 

Stayed up all night ©@® 



24. indicate the importance to you personally of 
the following persons or events 



decision to enroll in this college. 
(Mark one for each item) 


ft 




// 


Parent or other relative 


..Q... 


...o... 


•O 


High school teacher or counselor 


-G-. 


...O... 


«o 


Friends attending this college 




...O... 


..o 


Graduate or other representative from 








this college 


..a... 


...Q... 


...o 


Professional counseling or college 








placement service 


..a... 


...Q... 


...o 


Athletic program of the college 


..a... 


...a... 


...o 


Other extracurricular activities ...... 


..a... 


...Q... 


...o 


Social life of the college 


..a- 


...a... 


...o 


Opportunity to live away from home... 


..a... 


...a... 


..o 


1 ow cost 


..a... 


...a... 


..o 


Academic reputation of the college .. . 


..a- 


...Q... 


•O 


Most of the students are like me 


..Q... 


. . .a ... 


...o 


gious affiliation 


..a... 


...a... 


..o 
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25. Indicate the importance to you personally of ^ ^ 

each of the following:(Mark one for each item ) _ S' ^ £ 

ft ft 

Becoming accomplished in one of the performing arts (acting, £j £ Jj g 

dancing, etc.) ©0©® 

Becoming an authority on a special subject in my subject field . ©® ©® 
Obtaining recognition from my colleagues for contributions in my 

special field ©0®® 

Becoming an accomplished musician (performer or composer) . . . © ® ® ® 

Becoming an expert in finance and commerce ©0©® 

Having administrative rew>onsibility for the work of others © © © ® 

Being very well-off financially ©0©® 

Helping others who are in difficulty ©0©® 

Participating in an organization like the Peace Corps or Vista. . ©0 ©® 

Becoming an outstanding athlete ©0©® 

Becoming a community leader ©0©® 

Making a theoretical contribution to science ©0©® 

Writing original works (poems, novels, short stories, etc.) © © © ® 

Never being obligzted to people ©0©® 

Creating artistic work (painting, sculpture, decorating, etc.) ... ©0©® 

Keeping up to date with political affairs ©0©® 

Being successful in a business of my own © © © © 

Developing a meaningful philosophy of life ©0© © 



Agree strongly 
26. Mark one in 1 Agree somewhat 
each row: 1 Disagree somewhat 

Disagree strongly 






§ 



•* 

* 



$ £ 

£ 

fo o 

S * 

o p « 

<9 i « 

ft ^ ^ 

• <r <r 

< d o 



Students should have a major role in specifying the ^ 
college curriculum O. . . .O. . . .O. . . .O 



Scientists should publish their findings regardless of 
the possible consequences. O. . . .O. . . .O. . . .O 



Realistically, an individual person can do little to 
bring about changes in our society O. . . .O. . . .O. . . .O 



College officials have the right to regulate student 
behavior off campus. O. . . .O. . . .O. . . .O 



The chief benefit of a college education is that it 
increases one's earning power 



Faculty promotions should be based in part on student 
evaluations Q 



O....O....Q...O 
O....Q...O 



My beliefs and attitudes are similar to those of most 

other students O. . . .O. . . .O. . . .O 



Student publications should be cleared by college 

officials. O. . . .O. . . .Q . . .O 

Marijuana should be legal ized O. . . .O. . . .0. . . .O 

Current levels of air pollution in large cities justify 
the use of drastic measures to limit the use of motor 

vehicles O. . . .O. . . .Q . . .O 



Urban problems cannot be solved without huge 

investments of Federal money O. . . .O. . . .O. . . .O 



Cigarette advertising should be outlawed on radio 

and TV. .0....0....0....0 



College officials have the right to ban persons with 

extreme views from speaking on campus O. . . .O. . . .O. . . .O 

Only volunteers should serve in the armed forces .O. . . .O. . . O. . . .O 



Students from disadvantaged social backgrounds 
should be given preferential treatment in college 

Missions O. . . .O. . . O. . . .O 



Most college officials have been too lax in dealing 
with student protests on campus O. . ..O. . . ,0. . . .O 



hr CWkf of C^a ~ E<W;on i7S3 HmxliuwWi Av., N.W, Wathingaw, O.C. »r Comcufr 



Str °ntly 
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